Security Advisory
CVE-2020-13922
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.